Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa
File:                     vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa (raw, json)
Hash identifier:          /kPCV4cM78hGVZiI+66wXBuUvG+b5em8OIFff2dq6rw=
Subject key identifier:   BC:65:48:10:8F:E3:8A:D6:2A:DD:58:2A:F3:EC:35:C4:88:36:45:07
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa
Signing time:             Tue 30 Apr 2024 01:46:54 +0000
ROA not before:           Tue 30 Apr 2024 01:46:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:46:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BC6548108FE38AD62ADD582AF3EC35C488364507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:d1:0f:22:4e:a2:1a:4f:bc:de:ab:47:ba:
                    10:15:45:14:c6:04:4d:0a:43:08:2b:d2:5c:93:6d:
                    c2:f2:6a:6a:d5:10:a1:9e:bd:82:7c:84:a4:a2:fa:
                    f9:ec:c2:94:db:09:34:7d:cb:5e:14:fb:75:ce:e5:
                    76:78:6a:0e:aa:a0:94:6f:33:ce:a9:97:0f:2e:b2:
                    2b:cf:fe:a7:a7:c5:43:0f:03:00:38:a1:37:7b:dd:
                    04:6c:b5:95:f8:11:2a:45:32:77:a3:1b:f7:73:32:
                    83:2f:a1:0e:58:a1:6d:82:3e:3e:6c:50:9a:bd:9f:
                    6f:d9:6c:f3:d7:05:75:50:3a:0d:5f:53:ac:2c:af:
                    7c:68:15:42:4b:4d:03:bf:8d:3a:d4:18:26:37:f2:
                    05:c7:4e:95:dc:05:ab:1d:7b:70:20:e8:89:2c:ca:
                    14:75:7b:0b:66:16:30:60:78:aa:8c:d6:c6:23:29:
                    55:07:3c:6d:1d:11:9b:4c:74:69:ca:c1:2f:00:7f:
                    cf:a5:39:3e:e0:65:05:c3:5b:17:70:05:a3:94:06:
                    b5:10:0a:82:b7:41:70:80:ce:36:82:5f:03:f9:7a:
                    87:89:5e:eb:62:d3:1d:71:99:62:77:78:3f:97:ae:
                    fa:78:d4:c2:21:8b:f7:c4:3f:3d:1e:70:3e:ff:f2:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:65:48:10:8F:E3:8A:D6:2A:DD:58:2A:F3:EC:35:C4:88:36:45:07
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vGVIEI_jitYq3Vgq8-w1xIg2RQc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:2b:e2:c0:bf:16:ce:43:34:15:35:b9:dc:96:1c:51:55:41:
         de:b9:f6:ae:f4:6b:36:d4:e1:dd:11:f4:6e:aa:59:f4:7e:57:
         40:6c:4e:7e:b3:91:47:ed:f9:85:8f:d5:83:9c:43:7e:5d:8a:
         79:39:f5:28:74:ba:ff:88:25:e7:6b:a6:08:29:36:0b:0a:82:
         9d:b2:7b:89:b5:47:22:1f:dd:c9:0c:f6:be:ca:30:a0:86:f5:
         aa:fa:4b:ea:6a:0c:ba:5c:74:16:b0:f5:72:f4:f6:ce:ea:28:
         41:53:6a:19:36:ab:32:3c:74:66:49:a5:c3:9c:a5:96:1e:74:
         7e:24:4b:fd:ed:22:7e:8c:93:4d:2b:7c:08:6d:7b:06:d0:10:
         7e:e9:60:02:72:77:29:90:b4:cd:70:c1:b3:23:a8:25:ed:38:
         20:45:39:8b:45:56:47:54:2a:15:82:55:47:1c:e3:49:1c:5b:
         9e:05:f8:ac:8c:d0:57:99:4f:53:03:41:0b:c8:20:09:6a:9a:
         05:4f:47:b3:5c:a0:f2:79:d7:e9:7a:fd:74:74:25:44:27:80:
         6d:bc:dd:08:72:85:fa:56:02:63:79:fc:e4:f3:aa:35:33:53:
         5e:c2:85:da:f2:d0:71:6f:7c:55:dd:74:6f:41:15:e7:b1:c5:
         ea:27:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:37 2024 by rpki-client on console-ams.rpki-client.org